DevHlp_Security

Description

This is the kernel support for the security enabling services.

Calling convention

Subfunction: DHSEC_SETIMPORT
This function will load the ISS Security Event Service Routine Table into the kernel. Each service routine will be called upon a certain API event, such as opening a file, or starting a program. There are also service routines to capture each DOS API routine (if you are interested in this, and you are considered trustworthy by me, i.e. well-known in the OS/2 hacker’s scene, I can give you code for these rather tricky routines – collectors and gatherers stay off!).

  • EAX = 073ae3627h special function key
  • ECX = FLAT (linear) address of table to be submitted
  • DL = 044h

Subfunction: DHSEC_GETEXPORT
This function will return the table of security helper functions for file access. These helpers provide low level access to any file in the system which is not controlled by security services (unlike the normal DOS API).

  • EAX = 048a78df8h special function key
  • ECX = FLAT (linear) address of a buffer to receive the 40 byte table
  • DL = 044h

Subfunction: DHSEC_GETINFO
Internally used function, information withheld intentionally.

Subfunction: DHSEC_AUDITHOOK
Internally used function, information withheld intentionally.

Subfunction: DHSEC_TRUSTEDPATHNOTIFY
Internally used function, information withheld intentionally.

Subfunction: DHSEC_IMPORT_PDF
Special purpose function for an IBM product, information withheld intentionally.

Subfunction: DHSEC_IMPORT_AV
Special purpose function for an IBM product, information withheld intentionally.

Returns

  • CY=0, AX = 0, okay
  • CY=1, AX = APIRET error code

Data structures

It is beyond the scope of this text to explain all details of SES. Consult the Red Book SG2446-68, also available via DevCon. IBM has decided, as of SG2446-68, appendix A, not to publish the SES KPI. You can ask, according to the Red Book for this documentation at:

IBM Manager of OS/2 Security
Mail Stop 9171
11400 Burnet Rd.
Austin, Texas 78758
(is this address still valid?)

Restrictions

Valid at any time.